Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa
File:                     3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (raw, json)
Hash identifier:          YB2yFTvbeCAmxV41RmdGbDgAbxLcMosMeI7j1dZ8bN8=
Subject key identifier:   23:77:96:71:CC:69:D8:70:09:0E:A1:4B:63:32:29:71:43:21:D0:AC
Certificate issuer:       /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA
Certificate serial:       1B629C8E6AD706FF7C3F1974DE8C4ED3F9CD648B
Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa
Signing time:             Mon 23 Sep 2024 05:08:30 +0000
ROA not before:           Mon 23 Sep 2024 05:03:30 +0000
ROA not after:            Mon 22 Sep 2025 05:08:30 +0000
asID:                     141058
IP address blocks:        103.155.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl
                          rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:62:9c:8e:6a:d7:06:ff:7c:3f:19:74:de:8c:4e:d3:f9:cd:64:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA
        Validity
            Not Before: Sep 23 05:03:30 2024 GMT
            Not After : Sep 22 05:08:30 2025 GMT
        Subject: CN=23779671CC69D870090EA14B633229714321D0AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2f:5a:77:92:88:8b:07:c4:e2:2d:c0:6e:c9:
                    bd:6f:b9:a7:bc:fc:ea:52:d3:f7:c9:52:60:86:eb:
                    d5:58:ff:cc:49:ad:3f:95:64:9e:c6:43:ad:fb:86:
                    27:37:44:ea:78:41:0c:34:b5:51:bb:c2:54:b7:b0:
                    58:22:f3:28:19:50:c3:ca:5d:72:09:6d:70:55:2d:
                    f8:6b:e9:e3:5e:46:83:92:3f:ec:e9:1d:b3:da:4d:
                    5f:66:d0:65:ed:ae:c6:ad:c3:a1:8f:bd:49:33:0f:
                    98:7c:f0:dd:07:6e:b0:ba:97:70:cc:11:69:45:4c:
                    55:80:99:ed:92:38:d4:43:88:2a:d7:62:27:bd:42:
                    50:87:3c:e8:e5:f5:7a:23:2a:6a:a6:52:88:0c:9c:
                    36:b3:4c:d4:55:21:fd:f5:ac:06:3f:8e:0c:f2:96:
                    f4:5e:30:9e:db:2e:11:ef:09:f3:70:6d:f4:38:1e:
                    0f:c6:25:4b:d0:80:cf:c6:26:ed:76:15:bf:f4:a5:
                    57:22:90:d2:5c:ff:77:3b:b7:5b:4e:ab:3e:55:f9:
                    25:21:70:b5:16:c0:4b:23:50:d1:93:a2:30:31:3e:
                    ea:80:37:35:62:fb:87:48:77:0b:c0:be:ab:52:ed:
                    b2:26:7b:73:bd:3d:aa:ce:87:88:41:fe:de:36:ca:
                    7c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:77:96:71:CC:69:D8:70:09:0E:A1:4B:63:32:29:71:43:21:D0:AC
            X509v3 Authority Key Identifier:
                keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:34:43:ef:1c:68:a0:37:01:1e:59:11:51:ef:8e:fa:a5:80:
         8d:b9:67:fe:84:de:9c:de:1b:a1:6d:6e:68:1d:15:f0:b9:08:
         a7:51:9f:af:a3:6c:ec:96:c0:b6:4b:d7:80:41:57:a4:85:67:
         5d:fd:04:52:e1:87:e8:82:28:5d:d5:33:8f:2e:99:7f:a2:f0:
         a7:5a:d1:ed:5b:71:b3:31:86:26:e2:59:b4:ad:20:b3:95:f3:
         4b:0f:4c:e1:35:04:e5:35:b9:66:17:c2:b9:87:c2:2d:b1:3f:
         4e:c5:9c:7d:43:48:f9:f8:a6:02:a1:b9:ee:45:02:7a:13:d7:
         14:48:05:23:0d:8b:21:4b:31:9c:c1:3b:ea:44:00:02:2e:da:
         dd:80:bf:4e:7a:58:01:2a:16:e3:8d:ec:e5:58:09:cd:e6:d0:
         99:4d:28:6b:2d:04:d3:5c:a7:b3:0b:36:6a:e6:b4:29:02:7d:
         2f:09:4d:f0:05:6b:fb:3c:0c:83:c0:ba:d2:92:e2:77:3d:8f:
         bf:b3:8a:b8:67:57:97:eb:10:ef:64:80:84:6d:5c:03:a6:94:
         26:8e:af:db:5e:24:ae:79:0d:dd:71:ef:cf:62:ae:e4:24:13:
         85:a1:4a:c7:80:96:81:d1:4c:00:2f:69:6d:a4:7a:03:8e:ae:
         1e:02:31:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:17:41 2024 by rpki-client on console-fra.rpki-client.org